mindoodb 0.0.53 → 0.0.55

package/dist/node/server/peer/types.d.ts

@@ -0,0 +1,244 @@
+/**
+ * Types for server-to-server (peer) replication and the cluster admin surface.
+ *
+ * Two auth classes, two route prefixes — the split is load-bearing:
+ *
+ * - `/system/peer/*` is the **server-to-server protocol**. Callers authenticate
+ *   with a server identity listed in `trusted-servers.json`. Only servers speak
+ *   it.
+ * - `/system/cluster/*` is the **admin surface**. Callers authenticate with a
+ *   system-admin JWT and pass the {@link CapabilityMatcher}. Only humans and
+ *   UIs speak it.
+ *
+ * No endpoint accepts both, so a peer can never administer and an admin can
+ * never write as a peer.
+ */
+/**
+ * Which way entries flow to a peer.
+ *
+ * Mirrors Haven's client-side `SyncDirectionPreference` so operators meet one
+ * vocabulary. `pull` is the backup/archive node (never writes to the peer),
+ * `push` the DMZ head (never reads back), `disabled` keeps the trust entry for
+ * inbound authentication but opens no outbound session.
+ */
+export type PeerSyncDirection = "bidirectional" | "push" | "pull" | "disabled";
+/**
+ * Mesh shape.
+ *
+ * A `spoke` opens sessions only to `hub` peers, never to another spoke, which
+ * turns the full mesh into a spanning tree. Because the entry set is a CRDT
+ * both converge; the tree just avoids the O(N^2) sessions of a large mesh.
+ * `peer` (the default) is fully meshed and is the right answer for two or three
+ * nodes — duplicate pushes are acknowledged idempotently by the receiver's
+ * duplicate path, so the redundancy is cheap.
+ */
+export type PeerRole = "peer" | "hub" | "spoke";
+/**
+ * How eagerly attachment blobs follow their documents.
+ *
+ * Attachments are usually the bulk of the bytes and live in a separate store,
+ * which makes this the biggest bandwidth lever. `lazy` still transfers them but
+ * only after every document store is done; `never` skips the attachment store
+ * entirely (an edge node that only needs text).
+ */
+export type PeerAttachmentMode = "eager" | "lazy" | "never";
+/** Peer settings resolved against their defaults. */
+export interface PeerSettings {
+    direction: PeerSyncDirection;
+    role: PeerRole;
+    attachments: PeerAttachmentMode;
+}
+export declare const DEFAULT_PEER_SETTINGS: PeerSettings;
+export declare function isPeerSyncDirection(value: unknown): value is PeerSyncDirection;
+export declare function isPeerRole(value: unknown): value is PeerRole;
+export declare function isPeerAttachmentMode(value: unknown): value is PeerAttachmentMode;
+/** Fill in defaults for any peer field the operator left unset. */
+export declare function normalizePeerSettings(raw: {
+    direction?: unknown;
+    role?: unknown;
+    attachments?: unknown;
+}): PeerSettings;
+/**
+ * Should this node open an outbound session to that peer?
+ *
+ * Spoke-to-spoke is the only pairing we suppress: both sides would otherwise
+ * dial each other even though the hub already carries their traffic.
+ */
+export declare function shouldOpenSessionTo(local: PeerRole, remote: PeerRole): boolean;
+/** May we send local entries to this peer? */
+export declare function directionAllowsPush(direction: PeerSyncDirection): boolean;
+/** May we take the peer's entries? */
+export declare function directionAllowsPull(direction: PeerSyncDirection): boolean;
+/**
+ * Order the databases of one tenant for replication.
+ *
+ * `directory` first, then `userdirectory`, then everything else alphabetically.
+ * This is not cosmetic. A peer validates every pushed entry against its own
+ * directory (`validatePublicSigningKey`), and an unknown author key is a
+ * **per-entry rejection**, not a batch failure. Push an application database
+ * before the peer has the author's grant and those entries are refused; with
+ * the client's cursor semantics they would then be skipped forever, leaving the
+ * two servers silently divergent.
+ *
+ * The same ordering also shrinks the transient window in which a purged
+ * document or a revoked `decryptionKeyId` makes the peer answer `ACCESS_DENIED`
+ * for a whole batch: both denylists are derived from the directory (purge
+ * requests live there and are executed by `executePendingPurges` after every
+ * directory push), so they converge as soon as the directory has arrived.
+ */
+export declare function orderDatabasesForReplication(dbIds: Iterable<string>): string[];
+/** True for the two system databases that must replicate before app data. */
+export declare function isTrustBearingDatabase(dbId: string): boolean;
+/** Live state of the outbound session to one peer. */
+export type ClusterSessionState = "connected" | "connecting" | "backoff" | "disabled" | "paused" | "unreachable";
+/**
+ * Health rollup, computed on the server so every console agrees on the
+ * thresholds instead of inventing its own.
+ */
+export type ClusterHealth = "ok" | "degraded" | "stalled" | "down";
+/**
+ * Why a peer is not `ok`. Typed so a UI can colour-code and explain without
+ * parsing prose.
+ *
+ * `entries-awaiting-directory-trust` is the one that matters most: it means the
+ * peer rejected entries because it does not yet trust their author, the cursor
+ * was held, and a retry is pending. Left unattended it is the visible precursor
+ * of two servers drifting apart.
+ */
+export type ClusterHealthReason = "entries-awaiting-directory-trust" | "access-denied-backoff" | "events-disconnected" | "intersection-stale" | "lag-above-threshold" | "peer-auth-failed" | "peer-unreachable" | "no-url-configured" | "session-disabled" | "session-paused";
+/** Typed error class beside the free-text `lastError`. */
+export type ClusterErrorClass = "auth" | "network" | "access-denied" | "protocol" | "internal";
+/**
+ * Bucket a replication failure so the console can react without parsing the
+ * message.
+ *
+ * The distinction that matters operationally is `access-denied` versus the
+ * rest: it is the peer *deliberately* refusing a batch (a purged document, a
+ * revoked key) and it resolves itself once the directory has replicated, so it
+ * warrants a backoff and not an alert. Everything else is either a
+ * misconfiguration (`auth`) or a genuine outage (`network`).
+ */
+/**
+ * Strip document and entry identifiers out of a message before it reaches the
+ * cluster status read-model.
+ *
+ * Rejection messages name the offending entry, and an entry id starts with the
+ * document id. The cluster console is a system-admin surface, and a system
+ * admin is not supposed to learn which documents a tenant holds — that is the
+ * same admin-blindness the encryption enforces, and it would be odd to hand it
+ * back through an error string. The classified reason plus the counts are what
+ * an operator can act on anyway.
+ */
+export declare function redactEntryIds(message: string): string;
+export declare function classifyPeerError(error: unknown): ClusterErrorClass;
+/** Per-tenant slice of a peer's replication state. */
+export interface ClusterTenantStatus {
+    tenantId: string;
+    /** Databases mirrored with this peer, in replication order. */
+    databases: string[];
+    lastSyncAt: string | null;
+    /** Entries the peer still owes us or we owe the peer, by head comparison. */
+    lag: number;
+    /** Entries rejected and queued for retry (see `entries-awaiting-directory-trust`). */
+    retryQueueDepth: number;
+    rejectedEntries: number;
+    health: ClusterHealth;
+    reasons: ClusterHealthReason[];
+}
+/** One peer as this node sees it. */
+export interface ClusterPeerStatus {
+    name: string;
+    url: string | null;
+    direction: PeerSyncDirection;
+    role: PeerRole;
+    attachments: PeerAttachmentMode;
+    state: ClusterSessionState;
+    health: ClusterHealth;
+    reasons: ClusterHealthReason[];
+    /** Tenants both sides hold, from the last Bloom intersection. */
+    sharedTenants: number;
+    lastIntersectionAt: string | null;
+    lastSyncAt: string | null;
+    eventsConnected: boolean;
+    lag: number;
+    retryQueueDepth: number;
+    rejectedEntries: number;
+    transferredEntries: number;
+    transferredBytes: number;
+    lastError: string | null;
+    lastErrorClass: ClusterErrorClass | null;
+    lastErrorAt: string | null;
+}
+/** Summary answer of `GET /system/cluster/status`. */
+export interface ClusterStatusResponse {
+    server: string | null;
+    health: ClusterHealth;
+    reasons: ClusterHealthReason[];
+    autoSyncEnabled: boolean;
+    generatedAt: string;
+    peers: ClusterPeerStatus[];
+}
+/** Drill-down answer of `GET /system/cluster/status/tenants/:tenantId`. */
+export interface ClusterTenantStatusResponse {
+    tenantId: string;
+    generatedAt: string;
+    peers: Array<{
+        name: string;
+        tenant: ClusterTenantStatus | null;
+    }>;
+}
+/** One entry of `GET /system/cluster/topology`. */
+export interface ClusterTopologyPeer {
+    name: string;
+    url: string | null;
+    direction: PeerSyncDirection;
+    role: PeerRole;
+    attachments: PeerAttachmentMode;
+    sessionActive: boolean;
+}
+export interface ClusterTopologyResponse {
+    /**
+     * This node's own identity and role. The console starts here and then polls
+     * every peer directly — no node answers on behalf of another (fan-out).
+     */
+    server: {
+        name: string | null;
+        role: PeerRole;
+    };
+    peers: ClusterTopologyPeer[];
+}
+export type ClusterJobState = "queued" | "running" | "succeeded" | "failed";
+export type ClusterJobKind = "sync" | "retry-rejected" | "refresh-intersection" | "pause" | "resume";
+export interface ClusterJobScope {
+    peer?: string;
+    tenantId?: string;
+    dbId?: string;
+}
+export interface ClusterJob {
+    id: string;
+    kind: ClusterJobKind;
+    scope: ClusterJobScope;
+    state: ClusterJobState;
+    createdAt: string;
+    startedAt: string | null;
+    finishedAt: string | null;
+    /** Coarse progress counters; never carries document identity. */
+    progress: {
+        total: number;
+        completed: number;
+    };
+    result: ClusterJobResult | null;
+    error: string | null;
+    errorClass: ClusterErrorClass | null;
+    /** System-admin principal that requested the job. */
+    requestedBy: string;
+}
+export interface ClusterJobResult {
+    transferredEntries: number;
+    transferredBytes: number;
+    /** Count only — the entry ids would leak document identity to the console. */
+    rejectedEntries: number;
+    tenantsProcessed: number;
+    databasesProcessed: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/node/server/peer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/node/server/peer/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAE/E;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEhD;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AAE5D,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED,eAAO,MAAM,qBAAqB,EAAE,YAInC,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAI9E;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAE5D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,YAAY,CAUf;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,GAAG,OAAO,CAE9E;AAED,8CAA8C;AAC9C,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAEzE;AAED,sCAAsC;AACtC,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAEzE;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAoB9E;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5D;AAMD,sDAAsD;AACtD,MAAM,MAAM,mBAAmB,GAC3B,WAAW,GACX,YAAY,GACZ,SAAS,GACT,UAAU,GACV,QAAQ,GACR,aAAa,CAAC;AAElB;;;GAGG;AACH,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAEnE;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAC3B,kCAAkC,GAClC,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,GACpB,qBAAqB,GACrB,kBAAkB,GAClB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,0DAA0D;AAC1D,MAAM,MAAM,iBAAiB,GACzB,MAAM,GACN,SAAS,GACT,eAAe,GACf,UAAU,GACV,UAAU,CAAC;AAEf;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAgDnE;AAED,sDAAsD;AACtD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,6EAA6E;IAC7E,GAAG,EAAE,MAAM,CAAC;IACZ,sFAAsF;IACtF,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,qCAAqC;AACrC,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,iEAAiE;IACjE,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,sDAAsD;AACtD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,iBAAiB,EAAE,CAAC;CAC5B;AAED,2EAA2E;AAC3E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CACpE;AAED,mDAAmD;AACnD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC;IAChD,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAMD,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE5E,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,gBAAgB,GAChB,sBAAsB,GACtB,OAAO,GACP,QAAQ,CAAC;AAEb,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,eAAe,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrC,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;CAC5B"}

package/dist/node/server/peer/types.js

@@ -0,0 +1,189 @@
+"use strict";
+/**
+ * Types for server-to-server (peer) replication and the cluster admin surface.
+ *
+ * Two auth classes, two route prefixes — the split is load-bearing:
+ *
+ * - `/system/peer/*` is the **server-to-server protocol**. Callers authenticate
+ *   with a server identity listed in `trusted-servers.json`. Only servers speak
+ *   it.
+ * - `/system/cluster/*` is the **admin surface**. Callers authenticate with a
+ *   system-admin JWT and pass the {@link CapabilityMatcher}. Only humans and
+ *   UIs speak it.
+ *
+ * No endpoint accepts both, so a peer can never administer and an admin can
+ * never write as a peer.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PEER_SETTINGS = void 0;
+exports.isPeerSyncDirection = isPeerSyncDirection;
+exports.isPeerRole = isPeerRole;
+exports.isPeerAttachmentMode = isPeerAttachmentMode;
+exports.normalizePeerSettings = normalizePeerSettings;
+exports.shouldOpenSessionTo = shouldOpenSessionTo;
+exports.directionAllowsPush = directionAllowsPush;
+exports.directionAllowsPull = directionAllowsPull;
+exports.orderDatabasesForReplication = orderDatabasesForReplication;
+exports.isTrustBearingDatabase = isTrustBearingDatabase;
+exports.redactEntryIds = redactEntryIds;
+exports.classifyPeerError = classifyPeerError;
+const types_1 = require("../../../core/types");
+exports.DEFAULT_PEER_SETTINGS = {
+    direction: "bidirectional",
+    role: "peer",
+    attachments: "eager",
+};
+function isPeerSyncDirection(value) {
+    return (value === "bidirectional" || value === "push" || value === "pull" || value === "disabled");
+}
+function isPeerRole(value) {
+    return value === "peer" || value === "hub" || value === "spoke";
+}
+function isPeerAttachmentMode(value) {
+    return value === "eager" || value === "lazy" || value === "never";
+}
+/** Fill in defaults for any peer field the operator left unset. */
+function normalizePeerSettings(raw) {
+    return {
+        direction: isPeerSyncDirection(raw.direction)
+            ? raw.direction
+            : exports.DEFAULT_PEER_SETTINGS.direction,
+        role: isPeerRole(raw.role) ? raw.role : exports.DEFAULT_PEER_SETTINGS.role,
+        attachments: isPeerAttachmentMode(raw.attachments)
+            ? raw.attachments
+            : exports.DEFAULT_PEER_SETTINGS.attachments,
+    };
+}
+/**
+ * Should this node open an outbound session to that peer?
+ *
+ * Spoke-to-spoke is the only pairing we suppress: both sides would otherwise
+ * dial each other even though the hub already carries their traffic.
+ */
+function shouldOpenSessionTo(local, remote) {
+    return !(local === "spoke" && remote === "spoke");
+}
+/** May we send local entries to this peer? */
+function directionAllowsPush(direction) {
+    return direction === "bidirectional" || direction === "push";
+}
+/** May we take the peer's entries? */
+function directionAllowsPull(direction) {
+    return direction === "bidirectional" || direction === "pull";
+}
+// =========================================================================
+// Replication ordering (convergence invariant 1)
+// =========================================================================
+/**
+ * Order the databases of one tenant for replication.
+ *
+ * `directory` first, then `userdirectory`, then everything else alphabetically.
+ * This is not cosmetic. A peer validates every pushed entry against its own
+ * directory (`validatePublicSigningKey`), and an unknown author key is a
+ * **per-entry rejection**, not a batch failure. Push an application database
+ * before the peer has the author's grant and those entries are refused; with
+ * the client's cursor semantics they would then be skipped forever, leaving the
+ * two servers silently divergent.
+ *
+ * The same ordering also shrinks the transient window in which a purged
+ * document or a revoked `decryptionKeyId` makes the peer answer `ACCESS_DENIED`
+ * for a whole batch: both denylists are derived from the directory (purge
+ * requests live there and are executed by `executePendingPurges` after every
+ * directory push), so they converge as soon as the directory has arrived.
+ */
+function orderDatabasesForReplication(dbIds) {
+    const rest = [];
+    let hasDirectory = false;
+    let hasUserDirectory = false;
+    for (const dbId of dbIds) {
+        if (dbId === types_1.DIRECTORY_DB_ID) {
+            hasDirectory = true;
+        }
+        else if (dbId === types_1.USER_DIRECTORY_DB_ID) {
+            hasUserDirectory = true;
+        }
+        else {
+            rest.push(dbId);
+        }
+    }
+    rest.sort((left, right) => left.localeCompare(right));
+    const ordered = [];
+    if (hasDirectory)
+        ordered.push(types_1.DIRECTORY_DB_ID);
+    if (hasUserDirectory)
+        ordered.push(types_1.USER_DIRECTORY_DB_ID);
+    return ordered.concat(rest);
+}
+/** True for the two system databases that must replicate before app data. */
+function isTrustBearingDatabase(dbId) {
+    return dbId === types_1.DIRECTORY_DB_ID || dbId === types_1.USER_DIRECTORY_DB_ID;
+}
+/**
+ * Bucket a replication failure so the console can react without parsing the
+ * message.
+ *
+ * The distinction that matters operationally is `access-denied` versus the
+ * rest: it is the peer *deliberately* refusing a batch (a purged document, a
+ * revoked key) and it resolves itself once the directory has replicated, so it
+ * warrants a backoff and not an alert. Everything else is either a
+ * misconfiguration (`auth`) or a genuine outage (`network`).
+ */
+/**
+ * Strip document and entry identifiers out of a message before it reaches the
+ * cluster status read-model.
+ *
+ * Rejection messages name the offending entry, and an entry id starts with the
+ * document id. The cluster console is a system-admin surface, and a system
+ * admin is not supposed to learn which documents a tenant holds — that is the
+ * same admin-blindness the encryption enforces, and it would be odd to hand it
+ * back through an error string. The classified reason plus the counts are what
+ * an operator can act on anyway.
+ */
+function redactEntryIds(message) {
+    return message.replace(/[0-9a-f]{16,}/gi, "<redacted>");
+}
+function classifyPeerError(error) {
+    const type = error?.type;
+    switch (type) {
+        case "ACCESS_DENIED":
+        // Every 403 reaches the client as USER_REVOKED, whatever the server meant
+        // by it. For a peer that is unambiguous: it holds no user identity, so a
+        // 403 can only mean the target refuses these particular entries — a purged
+        // document, a revoked decryption key. That is a backoff, not a
+        // misconfigured trust relationship.
+        case "USER_REVOKED":
+            return "access-denied";
+        case "INVALID_TOKEN":
+        case "INVALID_SIGNATURE":
+        case "CHALLENGE_EXPIRED":
+            return "auth";
+        case "NETWORK_ERROR":
+        case "RATE_LIMITED":
+            return "network";
+        case "PAYLOAD_TOO_LARGE":
+        case "SERVER_ERROR":
+            return "protocol";
+        default:
+            break;
+    }
+    const message = (error instanceof Error ? error.message : String(error)).toLowerCase();
+    if (message.includes("access_denied") || message.includes("access denied")) {
+        return "access-denied";
+    }
+    if (message.includes("401") ||
+        message.includes("403") ||
+        message.includes("authentication") ||
+        message.includes("token")) {
+        return "auth";
+    }
+    if (message.includes("fetch failed") ||
+        message.includes("econnrefused") ||
+        message.includes("enotfound") ||
+        message.includes("etimedout") ||
+        message.includes("socket") ||
+        message.includes("network")) {
+        return "network";
+    }
+    return "internal";
+}
+//# sourceMappingURL=types.js.map

package/dist/node/server/peer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/node/server/peer/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAiDH,kDAIC;AAED,gCAEC;AAED,oDAEC;AAGD,sDAcC;AAQD,kDAEC;AAGD,kDAEC;AAGD,kDAEC;AAuBD,oEAoBC;AAGD,wDAEC;AAuED,wCAEC;AAED,8CAgDC;AA3QD,+CAA4E;AAyC/D,QAAA,qBAAqB,GAAiB;IACjD,SAAS,EAAE,eAAe;IAC1B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,OAAO;CACrB,CAAC;AAEF,SAAgB,mBAAmB,CAAC,KAAc;IAChD,OAAO,CACL,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU,CAC1F,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC;AAClE,CAAC;AAED,SAAgB,oBAAoB,CAAC,KAAc;IACjD,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;AACpE,CAAC;AAED,mEAAmE;AACnE,SAAgB,qBAAqB,CAAC,GAIrC;IACC,OAAO;QACL,SAAS,EAAE,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC;YAC3C,CAAC,CAAC,GAAG,CAAC,SAAS;YACf,CAAC,CAAC,6BAAqB,CAAC,SAAS;QACnC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,6BAAqB,CAAC,IAAI;QAClE,WAAW,EAAE,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC;YAChD,CAAC,CAAC,GAAG,CAAC,WAAW;YACjB,CAAC,CAAC,6BAAqB,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,KAAe,EAAE,MAAgB;IACnE,OAAO,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,8CAA8C;AAC9C,SAAgB,mBAAmB,CAAC,SAA4B;IAC9D,OAAO,SAAS,KAAK,eAAe,IAAI,SAAS,KAAK,MAAM,CAAC;AAC/D,CAAC;AAED,sCAAsC;AACtC,SAAgB,mBAAmB,CAAC,SAA4B;IAC9D,OAAO,SAAS,KAAK,eAAe,IAAI,SAAS,KAAK,MAAM,CAAC;AAC/D,CAAC;AAED,4EAA4E;AAC5E,iDAAiD;AACjD,4EAA4E;AAE5E;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,4BAA4B,CAAC,KAAuB;IAClE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,uBAAe,EAAE,CAAC;YAC7B,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,IAAI,KAAK,4BAAoB,EAAE,CAAC;YACzC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC;IAChD,IAAI,gBAAgB;QAAE,OAAO,CAAC,IAAI,CAAC,4BAAoB,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,6EAA6E;AAC7E,SAAgB,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI,KAAK,uBAAe,IAAI,IAAI,KAAK,4BAAoB,CAAC;AACnE,CAAC;AAkDD;;;;;;;;;GASG;AACH;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,OAAe;IAC5C,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;AAC1D,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,MAAM,IAAI,GAAI,KAAkC,EAAE,IAAI,CAAC;IACvD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe,CAAC;QACrB,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,+DAA+D;QAC/D,oCAAoC;QACpC,KAAK,cAAc;YACjB,OAAO,eAAe,CAAC;QACzB,KAAK,eAAe,CAAC;QACrB,KAAK,mBAAmB,CAAC;QACzB,KAAK,mBAAmB;YACtB,OAAO,MAAM,CAAC;QAChB,KAAK,eAAe,CAAC;QACrB,KAAK,cAAc;YACjB,OAAO,SAAS,CAAC;QACnB,KAAK,mBAAmB,CAAC;QACzB,KAAK,cAAc;YACjB,OAAO,UAAU,CAAC;QACpB;YACE,MAAM;IACV,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACvF,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3E,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IACE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EACzB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IACE,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC3B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/node/server/server.d.ts

@@ -9,7 +9,7 @@
  * Options:
  *   -d, --data-dir <path>   Data directory path (default: ./data)
  *   -p, --port <port>       Server port (default: 1661)
- *   -s, --auto-sync         Enable automatic sync with remote servers
+ *   -s, --auto-sync         Replicate with the peers in trusted-servers.json
  *   -w, --static-dir <path> Serve static files from this directory at /statics/
  *   --tls-cert <path>       Path to TLS certificate file (PEM)
  *   --tls-key <path>        Path to TLS private key file (PEM)

package/dist/node/server/server.js

@@ -10,7 +10,7 @@
  * Options:
  *   -d, --data-dir <path>   Data directory path (default: ./data)
  *   -p, --port <port>       Server port (default: 1661)
- *   -s, --auto-sync         Enable automatic sync with remote servers
+ *   -s, --auto-sync         Replicate with the peers in trusted-servers.json
  *   -w, --static-dir <path> Serve static files from this directory at /statics/
  *   --tls-cert <path>       Path to TLS certificate file (PEM)
  *   --tls-key <path>        Path to TLS private key file (PEM)
@@ -21,11 +21,9 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 const MindooDBServer_1 = require("./MindooDBServer");
-const types_1 = require("../../core/types");
-const ServerSync_1 = require("./ServerSync");
 const config_1 = require("./config");
 const resolveServerPassword_1 = require("./resolveServerPassword");
-const types_2 = require("./types");
+const types_1 = require("./types");
 function parseArgs(args) {
     const options = {
         dataDir: "./data",
@@ -111,7 +109,8 @@ Usage:
 Options:
   -d, --data-dir <path>   Data directory path (default: ./data)
   -p, --port <port>       Server port (default: 1661)
-  -s, --auto-sync         Enable automatic sync with remote servers
+  -s, --auto-sync         Replicate with every peer in trusted-servers.json
+                          that has a "url" (see README-server.md, Clustering)
   -w, --static-dir <path> Serve static files at /statics/ (e.g. bootstrap UI)
   --config <path>         Path to config.json (default: <dataDir>/config.json)
   --tls-cert <path>       Path to TLS certificate file (PEM format)
@@ -129,7 +128,7 @@ Examples:
   # Start server with custom data directory and port
   npm run server:dev -- -d /var/lib/mindoodb -p 8080
 
-  # Start server with auto-sync enabled
+  # Start server as a cluster node, replicating with its trusted peers
   MINDOODB_SERVER_PASSWORD_FILE=./.server-password npm run server:dev -- -s
 
   # Start server with explicit config file
@@ -170,45 +169,27 @@ async function main() {
     const serverConfig = (0, config_1.loadServerConfig)(options.dataDir, options.configPath);
     // Create and start the server
     const server = new MindooDBServer_1.MindooDBServer(options.dataDir, serverPassword, options.staticDir, serverConfig, configPath);
-    // If auto-sync is enabled and we have server identity, start periodic sync
-    if (options.autoSync) {
+    // Peer replication is cluster-wide, not per tenant: one session per trusted
+    // server with a `url`, and every tenant both sides hold is mirrored over it.
+    if (options.autoSync || serverConfig.cluster?.autoSync) {
         const tenantManager = server.getTenantManager();
-        const serverIdentity = tenantManager.getServerIdentity();
-        if (!serverIdentity) {
+        if (!tenantManager.getServerIdentity()) {
             console.warn("[Main] Auto-sync enabled but no server.identity.json found. " +
                 "Run 'npm run init' to create a server identity.");
         }
         else if (!serverPassword) {
             console.warn("[Main] Auto-sync enabled but no server password (set " +
-                `${types_2.ENV_VARS.SERVER_PASSWORD} or ${types_2.ENV_VARS.SERVER_PASSWORD_FILE}). ` +
-                "Server-to-server sync will not work.");
+                `${types_1.ENV_VARS.SERVER_PASSWORD} or ${types_1.ENV_VARS.SERVER_PASSWORD_FILE}). ` +
+                "Peer replication needs it to sign challenges and unwrap peer entries.");
         }
         else {
-            const tenants = tenantManager.listTenants();
-            for (const tenantId of tenants) {
-                try {
-                    const tenant = await tenantManager.getTenant(tenantId);
-                    const config = tenant.context.config;
-                    if (config.remoteServers && config.remoteServers.length > 0) {
-                        const serverSync = new ServerSync_1.ServerSync(tenantManager.getCryptoAdapter(), tenantId, serverIdentity, serverPassword, async (dbId) => tenantManager.getStore(tenantId, dbId, types_1.StoreKind.docs));
-                        const stopSync = (0, ServerSync_1.startPeriodicSync)(serverSync, config.remoteServers);
-                        process.on("SIGINT", () => {
-                            console.log("\n[Main] Shutting down...");
-                            stopSync();
-                            process.exit(0);
-                        });
-                        process.on("SIGTERM", () => {
-                            console.log("\n[Main] Shutting down...");
-                            stopSync();
-                            process.exit(0);
-                        });
-                        console.log(`[Main] Started auto-sync for tenant ${tenantId}`);
-                    }
-                }
-                catch (error) {
-                    console.error(`[Main] Error setting up auto-sync for tenant ${tenantId}:`, error);
-                }
-            }
+            server.startCluster();
+            const shutdown = () => {
+                console.log("\n[Main] Shutting down...");
+                void server.stopCluster().finally(() => process.exit(0));
+            };
+            process.on("SIGINT", shutdown);
+            process.on("SIGTERM", shutdown);
         }
     }
     // Start listening

package/dist/node/server/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/node/server/server.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;GAkBG;;AAEH,qDAAkD;AAClD,4CAA6C;AAC7C,6CAA6D;AAC7D,qCAA+D;AAC/D,mEAAgE;AAChE,mCAAmC;AAanC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAe;QAC1B,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;wBAC7C,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;wBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBACD,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,aAAa;gBAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACxB,MAAM;YAER,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,WAAW;gBACd,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;oBACzB,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,cAAc;gBACjB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;oBAC5B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,UAAU;gBACb,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;oBAC7B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,MAAM;YAER;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;oBACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCb,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAExE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,6CAAqB,GAAE,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,UAAU,IAAI,uBAAuB,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,qEAAqE;IACrE,MAAM,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAA,yBAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3E,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,+BAAc,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAEhH,2EAA2E;IAC3E,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,aAAa,CAAC,iBAAiB,EAAE,CAAC;QAEzD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CACV,8DAA8D;gBAC9D,iDAAiD,CAClD,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CACV,uDAAuD;gBACvD,GAAG,gBAAQ,CAAC,eAAe,OAAO,gBAAQ,CAAC,oBAAoB,KAAK;gBACpE,sCAAsC,CACvC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC;YAE5C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;oBACvD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;oBAErC,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5D,MAAM,UAAU,GAAG,IAAI,uBAAU,CAC/B,aAAa,CAAC,gBAAgB,EAAE,EAChC,QAAQ,EACR,cAAc,EACd,cAAc,EACd,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAS,CAAC,IAAI,CAAC,CACvE,CAAC;wBAEF,MAAM,QAAQ,GAAG,IAAA,8BAAiB,EAAC,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;wBAErE,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;4BACxB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;4BACzC,QAAQ,EAAE,CAAC;4BACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;4BACzB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;4BACzC,QAAQ,EAAE,CAAC;4BACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;wBAClB,CAAC,CAAC,CAAC;wBAEH,OAAO,CAAC,GAAG,CAAC,uCAAuC,QAAQ,EAAE,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,gDAAgD,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/node/server/server.ts"],"names":[],"mappings":";;AACA;;;;;;;;;;;;;;;;;;GAkBG;;AAEH,qDAAkD;AAClD,qCAA+D;AAC/D,mEAAgE;AAChE,mCAAmC;AAanC,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAe;QAC1B,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,KAAK;KACZ,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAE5B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,IAAI,CAAC;YACV,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;wBAC7C,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACtB,CAAC;yBAAM,CAAC;wBACN,OAAO,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;wBAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBACD,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,aAAa;gBAChB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACxB,MAAM;YAER,KAAK,YAAY;gBACf,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC1B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,WAAW;gBACd,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;oBACzB,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,cAAc;gBACjB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC;oBAC5B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,UAAU;gBACb,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC;oBAC7B,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,MAAM;YAER,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBACX,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;gBACpB,MAAM;YAER;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;oBACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCb,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhC,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAExE,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,IAAA,6CAAqB,GAAE,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,UAAU,IAAI,uBAAuB,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,oBAAoB,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5B,qEAAqE;IACrE,MAAM,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAA,yBAAgB,EAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAE3E,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,+BAAc,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAEhH,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;QACvD,MAAM,aAAa,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAEhD,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CACV,8DAA8D;gBAC9D,iDAAiD,CAClD,CAAC;QACJ,CAAC;aAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CACV,uDAAuD;gBACvD,GAAG,gBAAQ,CAAC,eAAe,OAAO,gBAAQ,CAAC,oBAAoB,KAAK;gBACpE,uEAAuE,CACxE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,YAAY,EAAE,CAAC;YAEtB,MAAM,QAAQ,GAAG,GAAG,EAAE;gBACpB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzC,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/node/server/serverinit.d.ts

@@ -7,7 +7,8 @@
  *   npx ts-node src/serverinit.ts --name <serverName> [options]
  *
  * Options:
- *   -n, --name <name>       Server name (e.g., "server1") -- required
+ *   -n, --name <name>       Server name, canonical or abbreviated
+ *                           (e.g. "cn=server1/o=acme" or "server1/acme") -- required
  *   -d, --data-dir <path>   Data directory path (default: ./data)
  *   -f, --force             Overwrite existing server.identity.json
  *   --skip-admin            Skip system admin keypair generation

package/dist/node/server/serverinit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serverinit.d.ts","sourceRoot":"","sources":["../../../src/node/server/serverinit.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;GAiBG"}
+{"version":3,"file":"serverinit.d.ts","sourceRoot":"","sources":["../../../src/node/server/serverinit.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;GAkBG"}